auxiliarymoose

6 ms·

31.
by auxiliarymoose 10mo ago
The crazy thing is that today the JavaScript standard library is very robust, and yet the culture of pulling in a ton of dependencies persists. It's so much easier to develop code against a stable and secure platform, yet it seems the
32.
by auxiliarymoose 10mo ago
They are reasonably consistent because there is a de-facto reference implementation (Adobe Acrobat) which, if your implementation does not match exactly, users will think your implementation is broken. There isn't such an implementatio
33.
by auxiliarymoose 10mo ago
Also remember that if the untrusted SVG file is served from the same origin and is missing a `Content-Disposition: attachment` header (or a CSP that disables scripts), an attacker could upload a malicious SVG and send the SVG URL to an unsu
34.
by auxiliarymoose 10mo ago
Yes. Much better to handle all untrusted data safely rather than try to transform untrusted data into trusted data. I found this page a helpful summary of ways to prevent SVG XSS: https://digi.ninja/blog/svg_xss.php No
35.
by auxiliarymoose 10mo ago
You can use `&` operator to combine types. Works for adding fields, making branded types, etc.
36.
by auxiliarymoose 10mo ago
Agreed on native HTML+CSS+JSDoc. An advantage in my use-cases is that built-in browser dev tools become fluid to use. View a network request, click to the initiator directly in your source code, add breakpoints and step without getting thro
37.
by auxiliarymoose 10mo ago
This is how I develop web software, and I've found it productive and maintainable. A bonus of this approach is that it clearly delineates what type information is available at runtime, vs what type information is just a comment. (espec
38.
by auxiliarymoose 10mo ago
Fun will be prohibited until morale improves.
39.
by auxiliarymoose 10mo ago
Much of the challenge in JS today is due to unnecessary packages, build systems, and workarounds found throughout blogs and forums which were reasonable 5-10 years ago but aren't really needed today. Unfortunately, LLMs tend to output
40.
by auxiliarymoose 10mo ago
It is also (nearly) impossible to completely crash a web page. There isn't a main loop that can panic out. No matter where an exception gets thrown, the overall application keeps going and responding to events. Can't access a netw
41.
by auxiliarymoose 10mo ago
Yeah, I was one of those schmucks that used sympy / python instead of mathematica in my physics coursework. Policy was "mathematica is recommended and supported, but you can bring your own tools if you want to and can make them wo
42.
by auxiliarymoose 10mo ago
You can accomplish fork-join, data parallelism, and cancellation of task trees in a with `errgroup` in Go (which provides a way to approach structured concurrency). So at least those are a subset of Go's concurrency model.
43.
by auxiliarymoose 10mo ago
But how does one actually do that? What does the architecture and code look like?
44.
by auxiliarymoose 10mo ago
But how does one communicate and synchronize between tasks with structured concurrency? Consider a server handling transactional requests, which submit jobs and get results from various background workers, which broadcast change events to r
45.
by auxiliarymoose 10mo ago
Agreed. Rob Pike presented a good talk "Concurrency is not Parallelism" which explains the motivations behind Go's concurrency model: https://youtu.be/oV9rvDllKEg Between the lack of "colored functions&q
46.
by auxiliarymoose 10mo ago
Writing "append(s, ...)" instead of "s = append(s, ...)" results in a compiler error because it is an unused expression. I'm not sure how a newbie could make this mistake since that code doesn't compile.
47.
by auxiliarymoose 10mo ago
For me at least, I find it easier to see the shape of algorithms, control flow, and expressions when the variable names are concise. But this also might be because I have found Go to fit my use-cases and thinking style well, and Go programs
48.
by auxiliarymoose 10mo ago
I tried to check in on Java recently but got a NullPointerException when using the AbstractSingletonProxyFactoryBean !
49.
by auxiliarymoose 11mo ago
I mean, the software I develop is the system of record for the engineering and development of medical devices (and aerospace, automotive, industrial, etc. systems). So pacemakers and aircraft are relevant examples. I hadn't heard about
50.
by auxiliarymoose 11mo ago
High quality writing (e.g. MDN Web Docs, Go Documentation, internal docs) does not have a tendency to include mistakes or incorrect reasoning because it comes from a place of clear thinking and goes through a continuous process of peer revi
51.
by auxiliarymoose 11mo ago
Yeah, I will say it provides a good excuse to leadership & external stakeholders for fixing technical debt and working cross-functionally! Making infrastructure "AI-ready" and all that. I imagine more of the benefit of AI will
52.
by auxiliarymoose 11mo ago
I try them from time to time, but I have yet to see AI models produce a useful output for my work. The problems I work on are not well-represented in training data and internet-based resources, and correctness matters far more than speed. F
53.
by auxiliarymoose 11mo ago
> Today we have AI models that can already do as good, almost as good, or even better than the average human in many many tasks, including the ones you mentioned. We really don't. There are demos that look cool onstage, but there is
54.
by auxiliarymoose 11mo ago
Decision-making in organizations is definitely a hard problem. I think an uncomfortable reality is that a lot of decisions (technology, strategy, etc.) are not optimal or even rational, but more just an outcome of personal preferences. Even
55.
by auxiliarymoose 11mo ago
Some off the top of my head... - Instead of trying to get LLMs to answer user questions, write better FAQs informed by reviewing tickets submitted by customers - Instead of RAG for anything involving business data, have some DBA write a bun
56.
by auxiliarymoose 11mo ago
Super cool, thanks for sharing! This is one of the reasons I am so skeptical of the current AI hype cycle. There are boring, well-behaved classical solutions for many of the use-cases where fancy ML is pushed today. You'd think that ra
57.
by auxiliarymoose 11mo ago
And in Go I can build a production-ready HTTPS (not just HTTP) server with just the standard library and a few lines of code. (0 packages). That Rust does not have standard implementations of commonly-used features (such as an async runtime
58.
by auxiliarymoose 11mo ago
You can sorta think of `satisfies Foo` as "the type is exactly the literal value, but also make sure the value could be used in the place of a Foo"
59.
by auxiliarymoose 11mo ago
I think remote climate controls in a car are an ideal use-case for a simpler architecture. Consider WhatsApp could do 2M TCP connections on a single server 13 years ago, and Ford sells about 2M cars per year. Basic controls like changing th
60.
by auxiliarymoose 1y ago
Ah, thanks! Hard to keep up with this stuff. Next thing you know the boffins will tell us we need to switch to rot104 or even rot208 because of "post-quantum cryptography" or something.

More ›